file tampered with on friday

[HSOM]

Hi - I own two music schools each with a computer in them each with a detailed timetable on EXCEL.
The file also contains telephone numbers of pupils.
On Friday last week on of my teachers has deleted the telephone numbers (all of them) then pressed save as usual.
He has then taken all my pupils to his new school leaving me unable to contact them due to the fact that he deleted the telephone numbers.
The police are now involved as he has committed an offence under the computer misuse act 1990
The police have asked me if I can get proof that the telephone numbers were deleted on Friday which is when only he had the use of the computer. He left the school that day too.
The file was used by two teachers on the Saturday – they will have simply marked in attendance for the day and payments too then saved once or twice.
I’m desperate to prove that the column with the telephone numbers was tampered with on Friday.
Is it possible? Please tell me it is :o)

Jen

[oldchippy]

Cross-posted here

http://www.mrexcel.com/forum/showthr...=friday&page=1